Maximum active offenses reached

Explanation

The system is unable to create offenses or change a dormant offense to an active offense. The default number of active offenses that can be open on your system is limited to 2500. An active offense is any offense that continues to receive updated event counts in the past five days or less.

User response

Select one of the following options:

• Change low security offenses from open or active to closed, or to closed and protected.
• Tune your system to reduce the number of events that generate offenses.

  To prevent a closed offense from being removed by your data retention policy, protect the closed offense.